CVE-2023-36479 Jetty vulnerable to errant command quoting in CGI Servlet

🗓️ 15 Sep 2023 18:37:35Reported by GoogleType

osv

osv🔗 osv.dev👁 31 Views

Eclipse Jetty Canonical Repository vulnerability in CgiServle

Reporter	Title	Published	Views	Family All 122
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in eclipse jetty affect IBM Business Automation Workflow	3 Jun 202413:36	–	ibm
IBM Security Bulletins	Security Bulletin: An Eclipse Jetty vulnerability affects IBM Rational Functional Tester	18 Dec 202312:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM StreamSets Data Collector	22 Oct 202512:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Eclipse Jetty	29 Nov 202314:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in its dependencies (CVE-2022-45688, CVE-2023-28439, CVE-2023-33201, CVE-2023-41900, CVE-2023-36479, CVE-2023-40167, CVE-2023-36478, )	24 Mar 202514:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Browser User Interface is vulnerable to multiple vulnerabilities due to Eclipse Jetty	24 Nov 202302:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is vulnerable to various attacks due to Eclipse Jetty (CVE-2023-40167, CVE-2023-41900, CVE-2023-36479, CVE-2023-36478)	15 Dec 202316:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana is affected by Multiple Security Vulnerabilities	5 Feb 202415:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MaaS360 Cloud Extender Agent, Mobile Enterprise Gateway and VPN Module affected by multiple vulnerabilities	6 Feb 202419:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Rational Change	8 Oct 202413:07	–	ibm

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2023/09/msg00039.html
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36479.json
github	www.github.com/eclipse/jetty.project/security/advisories/GHSA-3gh6-v5v9-6v9j
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-36479
debian	www.debian.org/security/2023/dsa-5507
github	www.github.com/eclipse/jetty.project/pull/9516
github	www.github.com/eclipse/jetty.project/pull/9888
github	www.github.com/eclipse/jetty.project/pull/9889

10 Apr 2026 05:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.13.5

EPSS0.01383

eclipse jetty cgiservlet command execution vulnerability